AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A public key generation apparatus including: 

a random number generator for generating a random number ka that holds a relationship 
0 < ka < q, where an element in a finite group F for which multiplication is defined is g^ and an 
order that is a prime number of the element g is q; and 

a public key generator for calculating a public key ya in the finite group F from the 
random number ka, the element g, and the prime number q, 

wherein at least said random number generator and said public key generator w[q b e ing 
formed on one semiconductor integrated circuit, and 

wherein a controller of a first user as a distribution source of the public key controls 
controlling the random number generator and the public key generator for obtainin g to obtain 
the public key ya, and transmits t ransmitting the obtained public key ya to a second user as a 
distribution destination of the public key. 

2. (Currently Amended) The public key generation apparatus of Claim 1^ wherein 
said public key generator calculates the public key ya in the finite group F by a formula: 

ya = g^ka mod q, using the random number ka, the element g, and the prime number q. 

3. (Currently Amended) The public key generation apparatus of Claim 1^ wherein 
when the finite group F is an elliptic curve E(F) in a finite field, and an element of the 

elliptic curve E(F) is G, 

said public key generator calculates the public key ya on the elliptic curve E(F) by a 
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formula: ya = kaG mod q, using the random number ka, the element G, and the prime number 

q- 

4. (Currently Amended) The public key generation apparatus of Claim U wherein 
said random number generator generates a new random number ka after the calculation 

of the public key ya is completed. 

5. (Currently Amended) A shared key generation apparatus including: 

a random number generator for generating a random number ka that holds a relationship 
0 < ka < q, where an element in a finite group F for which multiplication is defined is and an 
order that is a prime number of the element g is q; and 

a shared key generator for calculating a shared key Ka in the finite group F from a 
public key yb that is generated from a random number kb which holds a relationship 0 < kb < q 
and is generated by a second user as a distribution destination of the shared key, and the random 
number ka, 

wherein at least said random number generator and said shared key generator are being 
formed on one semiconductor integrated circuit, and 

wherein a controller of a first user as a distribution source of the shared key obtaining 
obtains the public key yb from the second user as the shared key distribution destination, and 
controlling controls t he random number generator and the shared key generator for derivingj o 
derive the shared key Ka. 
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6. (Currently Amended) The shared key generation apparatus of Claim 5^ wherein 
said shared key generator calculate calculates t he shared key Ka in the finite group F by 

a formula: Ka = yb^ka mod q, using the public key yb = g^kb mod q which is generated by the 
second user as the shared key distribution destination and the random number ka. 

7. (Currently Amended) The shared key generation apparatus of Claim 5^ wherein 
when the finite group F is an elliptic curve E(F) in a finite field and an element of the 

elliptic curve E(F) is G, 

said shared key generator calculates the shared key Ka on the elliptic curve E(F) by a 
formula: Ka = kayb mod q, using the public key yb = kbG mod q which is generated on the 
elliptic curve E(F) from the random number kb by the second user as the shared key distribution 
destination, and the random number [[k]] ka. 

8. (Currently Amended) The shared key generation apparatus of Claim 5^ wherein 
said random number generator generates a new random number ka after the calculation 

of the shared key Ka is completed. 

9. (Currently Amended) A key exchange apparatus including: 

a random number generator for generating a random number ka that holds a relationship 
0 < ka < q, where an element in a finite group F for which multiplication is defined is g^ and an 
order that is a prime number of the element g is q; 

a public key generator for calculating a public key ya in the finite group F fi-om the 
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random number ka, the element g, and the prime number q; and 

a shared key generator for calculating a shared key Ka in the finite group F on the basis 
of the public key yb generated from a random number kb which holds a relationship 0 < kb < q 
and is generated by a second user as a distribution destination of the shared key, and the random 
number ka, 

wherein at least said random number generator, said public key generator, and said 
shared key generator ben ^are formed on one semiconductor integrated circuit, and 

wherein a controller of a first user as a distribution source of the shared key controlling 
controls the random number generator and the public key generator for obtainin g to obtain the 
public key yb, and controlling controls the shared key generation unit for d e rivin g to derive the 
shared key [[ka]] Ka. 

10. (Currently Amended) The key exchange apparatus of Claim 9^ wherein 

said public key generator calculates the public key ya in the finite group F by a formula: 
ya = g^ka mod q, using the random number ka, the element g, and the prime number q, and 

said shared key generator calculates the shared key Ka in the finite group F by a 
formula: Ka = yb^ka mod q, using the public key yb = g^kb mod q which is generated in the 
finite group F by the second user as the shared key distribution destination using the random 
number kb, and the random number ka. 

1 1 . (Currently Amended) The key exchange apparatus of Claim 9^ wherein 

when the finite group F is an elliptic curve E(F) in a finite field, and an element of the 
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elliptic curve E(F) is G, 

said public key generator calculates the public key ya on the elliptic curve E(F) by a 
formula: ya = kaG mod q, using the random number ka, the element G, and the prime number 
q, and 

said shared key generator calculates the shared key Ka on the elliptic curve E(F) by a 
formula: Ka = kayb mod q, using the public key yb = kbG mod q generated from the random 
number kb on the elliptic curve E(F) by the second user as the shared key distribution 
destination, and the random number ka. 

12. (Currently Amended) The key exchange apparatus of Claim 9^, wherein 

the random number generator generates a new random number ka after the calculation 
of the public key ya and the calculation of the shared key Ka are both completed. 

13. (Currently Amended) A key exchange apparatus including: 

a random number generator for generating a random number ka that holds a relationship 
0 < ka < q, where an element in a finite group F for which multiplication is defined is g^ and an 
order that is a prime number of the element g is q; 

a secret key holding unit for temporarily holding the random number ka; 

a public key generator for calculating a public key ya in the finite group F from the 
random number ka, the element g, and the prime number q; and 

a shared key generator for calculating a shared key Ka in the finite group F using a 
public key yb generated from a random number kb which holds a relationship 0 < kb < q and is 
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generated by a second user as a destination distribution of the shared key, and the random 
number ka that is held by the secret key holding unit, 

wherein at least said random number generator, said secret key holding unit, said public 
key generator, and the shared key generator bemg-are formed on one semiconductor integrated 
circuit, 

wherein a controller of a first user as a distribution source of the shared key controlling 
controls the random number generator and the public key generator for obtainin g to obtain the 
public key ya, and transmitting transmits t he obtained public key ya to a second user as a 
distribution destination of the shared key, and 

wherein said controller obtaining obtains t he public key yb from the second user as the 
shared key distribution destination, and controlling c ontrols the shared key generator fef 
d e rivin g to derive the shared key Ka. 

14. (Currently Amended) The key exchange apparatus of Claim 13^ wherein 
the public key generator calculates the public key ya in the finite group F using the 

random number ka, the element g, and the prime number q by a formula: ya = g^ka mod q, and 
the shared key generator calculates the shared key Ka in the finite group F by a formula: 
Ka = yb^ka mod q, using the public key yb = g^kb mod q that is generated in the finite group F 
from the random number kb by the second user as the shared key distribution destination, and 
the random number ka that is held in the secret key holding unit. 

15. (Currently Amended) The key exchange apparatus of Claim 13^ wherein 
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when the finite group F is an elliptic curve E(F) in a finite field, and an element on the 
elliptic curve E(F) is G, 

the public key generator calculates the public key ya on the elliptic curve E(F) using the 
random number ka, the element G, and the prime number q by a formula: ya = kaG mod q, and 

the shared key generator calculates the shared key Ka on the elliptic curve E(F) by a 
formula: Ka = Kayb mod q, using the public key yb = kbG mod q that is generated from the 
random number kb on the elliptic curve E(F) by the second user as the shared key distribution 
destination, and the random number ka that is held in the secret key holding unit. 

16. (Currently Amended) The key exchange apparatus of Claim 1 3^ wherein 

the random number generator generates a new random number ka after the calculation 
of the public key ya is completed, and 

the secret key holding unit holds the new random number ka generated by the random 
number generator. 

17. (Currently Amended) The key exchange apparatus of Claim 13^ wherein 

the random number generator generates a new random number ka after the calculation 
of the shared key Ka is completed, and 

the secret key holding unit holds the new random number ka generated by the random 
number generator. 

1 8. (Previously Presented) A key exchanging method that employs the key exchange 
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apparatus of Claim 9, thereby exchanging the public keys that are generated by a first user and a 
second user that intend to exchange the public keys, respectively, to generate a shared key by 
the first user and the second user on the basis of the exchanged public key, respectively. 

19. (Previously Presented) A key exchanging method that employs the key exchange 
apparatus of Claim 13, thereby exchanging the public keys that are generated by a first user and 
a second user that intend to exchange the public keys, respectively, to generate a shared key by 
the first user and the second user on the basis of the exchanged public key, respectively. 
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